$ rpki-client -vvf rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft File: k524p4YADCa65IN7bs2uD4q60bA.mft (raw, json) Hash identifier: 1YJ1mRo0xxJrhC59jPXwiQBdYic4EJ1EM7IRORhclPQ= Subject key identifier: 6F:5A:BE:C5:11:15:11:55:4D:0F:07:7F:33:27:DF:69:93:AD:B6:32 Authority key identifier: 93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0 Certificate issuer: /CN=A91CDEB3/serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0 Certificate serial: 192B Authority info access: rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer Subject info access: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft Manifest number: 190A Signing time: Tue 04 Nov 2025 16:32:47 +0000 Manifest this update: Tue 04 Nov 2025 16:32:46 +0000 Manifest next update: Tue 11 Nov 2025 16:32:46 +0000 Files and hashes: 1: k524p4YADCa65IN7bs2uD4q60bA.crl (hash: 5MD8WDJWpdt9/cext2z0qbi9z1T0aBt+AV8TBTTtHNk=) 2: 5705E30EFC7A11E8BFCC760AC4F9AE02.roa (hash: RcpE2NmElWenIIwpxF/vjS3o5Nvaagq1xWJPPP3ACe8=) 3: A6ACA298858911E88026B416C4F9AE02.roa (hash: KhZ44smvv0XMa3hY/4cdC4BTlTI2qU0P4EUvi2XPNs8=) Validation: OK Signature path: rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer Signature path expires: Tue 11 Nov 2025 16:32:45 +0000 Certificate: Data: Version: 3 (0x2) Serial Number: 6443 (0x192b) Signature Algorithm: sha256WithRSAEncryption Issuer: CN=A91CDEB3, serialNumber=939DB8A786000C26BAE4837B6ECDAE0F8ABAD1B0 Validity Not Before: Nov 4 16:32:46 2025 GMT Not After : Nov 11 16:32:46 2025 GMT Subject: CN=690a2aae-74bd Subject Public Key Info: Public Key Algorithm: rsaEncryption RSA Public-Key: (2048 bit) Modulus: 00:cb:60:b9:11:90:76:90:79:bd:93:63:4f:2e:d8: 98:49:20:c9:34:52:14:2b:9b:91:3e:59:2a:de:3b: 5c:ce:d7:7b:4e:b4:e0:21:c7:b8:26:8c:ab:35:dd: be:f8:78:25:1d:f4:4f:32:ce:0d:02:71:b7:59:9b: a8:b1:5f:40:43:92:57:b1:0f:37:58:a6:dc:74:d8: fc:bf:64:5c:b7:9a:8e:e1:ca:a0:28:12:2c:7e:5d: f3:be:d7:3e:40:0f:50:b5:ce:5d:47:e2:02:60:b5: 02:b0:95:f8:ab:ae:c6:5d:78:20:b1:51:98:ca:ee: 5e:e5:b5:c6:50:dd:a7:9f:87:89:f5:66:c9:36:39: 02:88:bf:0b:bc:ad:2e:1a:3d:bd:ee:41:79:00:e4: fb:5d:14:40:b1:bb:c7:60:10:a8:5b:3b:a7:2c:c6: b5:dc:66:21:b0:ce:71:0b:b8:a9:ce:c8:17:ad:25: 70:43:8c:9c:03:89:90:7c:1a:71:b7:64:57:24:d2: 5f:6d:d5:50:58:e7:88:c0:62:31:11:17:5c:41:03: 8c:0a:c5:78:7d:0d:a7:4e:1e:12:08:f8:62:82:15: b0:10:2d:52:16:56:92:91:36:53:31:40:75:80:8d: 47:ba:80:e0:ef:ef:24:ca:bb:da:af:8b:1c:26:a9: 52:f5 Exponent: 65537 (0x10001) X509v3 extensions: X509v3 Subject Key Identifier: 6F:5A:BE:C5:11:15:11:55:4D:0F:07:7F:33:27:DF:69:93:AD:B6:32 X509v3 Authority Key Identifier: keyid:93:9D:B8:A7:86:00:0C:26:BA:E4:83:7B:6E:CD:AE:0F:8A:BA:D1:B0 X509v3 Key Usage: critical Digital Signature X509v3 CRL Distribution Points: Full Name: URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.crl Authority Information Access: CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/k524p4YADCa65IN7bs2uD4q60bA.cer X509v3 Certificate Policies: critical Policy: ipAddr-asNumber CPS: https://www.apnic.net/RPKI/CPS.pdf Subject Information Access: Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CDEB3/5D735D4696DE11E7BA7D2A77C4F9AE02/k524p4YADCa65IN7bs2uD4q60bA.mft RPKI Notify - URI:https://rrdp.apnic.net/notification.xml sbgp-autonomousSysNum: critical Autonomous System Numbers: inherit sbgp-ipAddrBlock: critical IPv4: inherit IPv6: inherit Signature Algorithm: sha256WithRSAEncryption 49:ab:b1:97:19:3e:2f:91:40:00:e9:93:3a:4a:f1:c3:5c:c3: 90:8b:65:6e:3c:0c:73:af:5f:71:c5:3c:9f:e0:3f:3c:ad:db: ed:92:1f:67:57:40:ba:ec:3c:83:be:98:68:d8:9b:2d:0e:bd: ce:c6:ac:88:00:fe:44:ed:a1:ec:de:52:96:dc:3e:be:24:98: b7:c2:02:ad:ad:24:f8:10:36:e8:a6:9b:5b:21:67:8a:4f:a4: 36:c0:b6:5d:12:87:5b:6b:d4:fd:01:e1:a9:2b:79:39:cf:f2: ce:85:9e:22:27:54:04:30:70:40:03:5c:bc:03:cb:b0:6a:51: 9e:b4:12:37:54:bf:54:ba:14:ba:9f:bc:ae:42:4f:c9:55:04: a4:04:48:fd:a8:de:89:1d:63:0a:7c:a9:94:d6:d4:c5:cb:22: d2:dd:fd:be:61:99:77:fa:55:b2:2f:d4:28:1b:8b:73:96:25: e0:bc:1f:f5:0a:5f:68:51:ac:fa:57:23:2a:07:01:e8:c9:42: cb:6a:42:c0:20:9b:ef:2a:69:30:c5:d5:35:7b:36:83:d1:5c: 66:e2:66:dc:cd:27:ca:a1:97:66:a2:cd:c6:ff:bd:d1:0b:79: cc:2f:ce:b4:fb:62:41:0d:2c:a8:1f:51:49:fd:a9:70:db:0b: 94:8b:91:86 -----BEGIN CERTIFICATE----- MIIFhDCCBGygAwIBAgICGSswDQYJKoZIhvcNAQELBQAwRjERMA8GA1UEAxMIQTkx Q0RFQjMxMTAvBgNVBAUTKDkzOURCOEE3ODYwMDBDMjZCQUU0ODM3QjZFQ0RBRTBG OEFCQUQxQjAwHhcNMjUxMTA0MTYzMjQ2WhcNMjUxMTExMTYzMjQ2WjAYMRYwFAYD VQQDEw02OTBhMmFhZS03NGJkMIIBIjANBgkqhkiG9w0BAQEFAAOCAQ8AMIIBCgKC AQEAy2C5EZB2kHm9k2NPLtiYSSDJNFIUK5uRPlkq3jtcztd7TrTgIce4JoyrNd2+ +HglHfRPMs4NAnG3WZuosV9AQ5JXsQ83WKbcdNj8v2Rct5qO4cqgKBIsfl3zvtc+ QA9Qtc5dR+ICYLUCsJX4q67GXXggsVGYyu5e5bXGUN2nn4eJ9WbJNjkCiL8LvK0u Gj297kF5AOT7XRRAsbvHYBCoWzunLMa13GYhsM5xC7ipzsgXrSVwQ4ycA4mQfBpx t2RXJNJfbdVQWOeIwGIxERdcQQOMCsV4fQ2nTh4SCPhighWwEC1SFlaSkTZTMUB1 gI1HuoDg7+8kyrvar4scJqlS9QIDAQABo4ICqDCCAqQwHQYDVR0OBBYEFG9avsUR FRFVTQ8HfzMn32mTrbYyMB8GA1UdIwQYMBaAFJOduKeGAAwmuuSDe27Nrg+KutGw MA4GA1UdDwEB/wQEAwIHgDCBgwYDVR0fBHwwejB4oHagdIZycnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFDREVCMy81RDczNUQ0Njk2 REUxMUU3QkE3RDJBNzdDNEY5QUUwMi9rNTI0cDRZQURDYTY1SU43YnMydUQ0cTYw YkEuY3JsMH4GCCsGAQUFBwEBBHIwcDBuBggrBgEFBQcwAoZicnN5bmM6Ly9ycGtp LmFwbmljLm5ldC9yZXBvc2l0b3J5L0I1MjdFRjU4MUQ2NjExRTJCQjQ2OEY3Qzcy RkQxRkYyL2s1MjRwNFlBRENhNjVJTjdiczJ1RDRxNjBiQS5jZXIwSgYDVR0gAQH/ BEAwPjA8BggrBgEFBQcOAjAwMC4GCCsGAQUFBwIBFiJodHRwczovL3d3dy5hcG5p Yy5uZXQvUlBLSS9DUFMucGRmMIHFBggrBgEFBQcBCwSBuDCBtTB+BggrBgEFBQcw C4ZycnN5bmM6Ly9ycGtpLmFwbmljLm5ldC9tZW1iZXJfcmVwb3NpdG9yeS9BOTFD REVCMy81RDczNUQ0Njk2REUxMUU3QkE3RDJBNzdDNEY5QUUwMi9rNTI0cDRZQURD YTY1SU43YnMydUQ0cTYwYkEubWZ0MDMGCCsGAQUFBzANhidodHRwczovL3JyZHAu YXBuaWMubmV0L25vdGlmaWNhdGlvbi54bWwwFQYIKwYBBQUHAQgBAf8EBjAEoAIF ADAhBggrBgEFBQcBBwEB/wQSMBAwBgQCAAEFADAGBAIAAgUAMA0GCSqGSIb3DQEB CwUAA4IBAQBJq7GXGT4vkUAA6ZM6SvHDXMOQi2VuPAxzr19xxTyf4D88rdvtkh9n V0C67DyDvpho2JstDr3OxqyIAP5E7aHs3lKW3D6+JJi3wgKtrST4EDbopptbIWeK T6Q2wLZdEodba9T9AeGpK3k5z/LOhZ4iJ1QEMHBAA1y8A8uwalGetBI3VL9UuhS6 n7yuQk/JVQSkBEj9qN6JHWMKfKmU1tTFyyLS3f2+YZl3+lWyL9QoG4tzliXgvB/1 Cl9oUaz6VyMqBwHoyULLakLAIJvvKmkwxdU1ezaD0Vxm4mbczSfKoZdmos3G/73R C3nML860+2JBDSyoH1FJ/alw2wuUi5GG -----END CERTIFICATE-----Generated at Wed Nov 5 05:14:18 2025 by rpki-client